General

  • Target

    0d6e80341bbe729ec982295201a421955bbc818114dbeabb19f90a81f757e56d

  • Size

    3.4MB

  • MD5

    625837c60e3e4337a1132c904ce9c145

  • SHA1

    3b1b0fdbed811ff291d655f37f26629e2805e1b5

  • SHA256

    0d6e80341bbe729ec982295201a421955bbc818114dbeabb19f90a81f757e56d

  • SHA512

    a17d5898c68bf11b6a9fad74dddd9b06eb0ef16a2d130f53fd2e17659291b13e2411250910db0b928d5226c257f956bb4f1de890f0cdfb6e333019a2c71eef43

  • SSDEEP

    98304:A28E3M+7roYO9WKNyqi0RrEKkaK3b1Ng5sy:xWyrY95J/W5W

Score
9/10
upx

Malware Config

Signatures

  • ACProtect 1.3x - 1.4x DLL software 1 IoCs

    Detects file using ACProtect software.

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

Files

  • 0d6e80341bbe729ec982295201a421955bbc818114dbeabb19f90a81f757e56d
    .zip
  • 91vpn(3.5.4)/91vpn/91vpn.exe
    .exe windows x86

    a5b233c8ba692e0bbbee30240a6cf25e


    Code Sign

    Headers

    Imports

    Sections

  • 91vpn(3.5.4)/91vpn/app.txt
  • 91vpn(3.5.4)/91vpn/appface.dll
    .dll windows x86


    Code Sign

    Headers

    Exports

    Sections

  • 91vpn(3.5.4)/91vpn/cache.dat
  • 91vpn(3.5.4)/91vpn/encrypt.mdb
  • 91vpn(3.5.4)/91vpn/httpproxy.dll
    .dll windows x86

    c8542246c73dfcbc2b20e14b2a576db2


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • 91vpn(3.5.4)/91vpn/mfc100.dll
    .dll windows x86

    913659d5824252f76b6534ebb663565c


    Code Sign

    Headers

    Imports

    Sections

  • 91vpn(3.5.4)/91vpn/msvcp100.dll
    .dll windows x86

    7a0d9f66efd1839f136ca6896fa52dfa


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • 91vpn(3.5.4)/91vpn/msvcr100.dll
    .dll windows x86

    5271d5ce8b44dd47bc92563e27585466


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • 91vpn(3.5.4)/91vpn/updater.exe
    .exe windows x86

    c41dc11586624ce1549c858c0faba63a


    Code Sign

    Headers

    Imports

    Sections

  • 91vpn(3.5.4)/91vpn/vpnface.mdb
  • 91vpn(3.5.4)/91vpn/vpnutil.dll
    .dll windows x86

    a80bf4c7b4f322dc74afe78ced34fc74


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • 91vpn(3.5.4)/91vpn/zh-CN.dll
    .dll windows x86


    Code Sign

    Headers

    Sections